sslx

sslx openssl, но не нужно гуглить флаги. Один бинарник, который управляет сертификатами, TLS-соединениями и всем тем, для чего обычно нужно три разных вызова openssl. Написан на Rust с использованием rustls, не требует системного OpenSSL. Установка root@kitploit: cargo install sslx Собранные...

openvpn-install

openvpn-install Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux 및 AlmaLinux용 OpenVPN 설치 프로그램입니다. 이 스크립트를 사용하면 몇 초 만에 자신만의 안전한 VPN 서버를 설정하고 관리할 수 있습니다. 이게 무엇인가요? 이 스크립트는 VPS, 전용 서버, 또는 집에 있는 컴퓨터 등 자신의 서버에서 실행하도록 설계되었습니다. 설정이 완료되면 연결하려는 모든 기기에 대한 클라이언트 ...

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

CertificateDsc

CertificateDsc 행동 강령 이 프로젝트는 이 행동 강령을 채택했습니다. 릴리스 main 브랜치에 병합될 때마다 미리 보기 릴리스가 PowerShell Gallery에 배포됩니다. 주기적으로 릴리스 버전 태그가 푸시되어 전체 릴리스가 PowerShell Gallery에 배포됩니다. 기여 공통 DSC Community 기여 지침을 확인하세요. 변경 로그 각 버전의 전체 변경 사항 목록은 변경 로그에서 확인할 수 있습니다. 리소스 CertificateDsc 모듈은 DSC 리소스 모음인 Windows PowerShell...

infisical

오픈소스 시크릿 관리 플랫폼 : 팀/인프라 전반에 걸쳐 시크릿/구성을 동기화하고 시크릿 유출을 방지하세요. Slack | Infisical Cloud | 셀프 호스팅 | 문서 | 웹사이트 | Twitter | 채용 원격/SF 소개 Infisical 은 팀이 시크릿, 인증서, 권한 있는 접근 관리를 위해 사용하는 오픈소스 보안 인프라 플랫폼입니다. 우리는 보안 도구를 보안 팀뿐만 아니라 모든 사람이 더 쉽게 접근할 수 있도록 만드는 것을 목표로 하고 있으며, 이는 개발자 경험 전체를 처음부터 다시 설계하는 것을 의미합니다. 기능...

openssl: CMP indefinite cache growth of ExtraCerts

A flaw was found in OpenSSL. The CMP Certificate Management Protocol implementation does not clear cached additional certificates when an invalid message is received, leading to excessive memory consumption. This allows a malicious client to repeatedly send requests containing unique extra...

ALPINE-CVE-2026-63074

Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...

CVE-2026-70666

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:18+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-xpmj-wjcp-6pww 2026-08-19 09:32:00+00:00| seen| https://gist.github.com/alon710/f8eaee2020ed8f819add6f9d1de77bf8...

CVE-2026-71308

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:09+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-cfh6-pv5c-38jv 2026-08-19 01:22:20+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtfky2ijcb2v 2026-08-19 06:44:38+00:00...

GHSA-4H97-P9WQ-CHQJ Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False

Summary The CertificateExport handler in lemur/certificates/views.py nests its entire ownership / CertificatePermission check inside an if plugin.requireskey: branch. When the selected export plugin advertises requireskey = False, the authorization check is skipped entirely and any authenticated...

CVE-2026-71417

Lemur manages TLS certificate creation. Prior to 1.9.3, POST /api/1/certificates/upload allowed a non-read-only user to create a duplicate row using another certificate body, authorityid, serial, or externalid without requiring permission on the underlying authority. PUT /api/1/certificates//revo...

CVE-2026-70666

Lemur manages TLS certificate creation. Prior to 1.9.3, an authority-role member could update acmeurl through PUT /api/1/authorities/ without revalidation and direct setupacmeclientnoretry to an attacker-controlled ACME server. ACME directory and order responses contain newNonce, newOrder,...

EUVD-2026-61155

Lemur manages TLS certificate creation. Prior to 1.9.3, an authority-role member could update acmeurl through PUT /api/1/authorities/ without revalidation and direct setupacmeclientnoretry to an attacker-controlled ACME server. ACME directory and order responses contain newNonce, newOrder,...

EUVD-2026-61153

Lemur manages TLS certificate creation. Prior to 1.9.3, GET /api/1/destinations and GET /api/1/destinations/ relied only on authentication while sibling write handlers required adminpermission. DestinationOutputSchema returned raw options and copied them into pluginOptions without redacting...

CVE-2026-55163 Lemur: Privilege escalation via PUT /api/1/roles/<id> — non-admin role members can rewrite role membership

Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/roles/ in lemur/roles/views.py:298 authorized updates with RoleMemberPermissionroleid, which allowed either an administrator or any existing member of the target role. The handler passed data"users" and data"name" to service.updat...

CVE-2026-55163 Lemur: Privilege escalation via PUT /api/1/roles/<id> — non-admin role members can rewrite role membership

Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/roles/ in lemur/roles/views.py:298 authorized updates with RoleMemberPermissionroleid, which allowed either an administrator or any existing member of the target role. The handler passed data"users" and data"name" to service.updat...

GO-2026-5543 vulnerabilities

Vulnerabilities for packages: grafana, kyverno, k6, gitea, telegraf, cert-manager-istio-csr, seaweedfs, juicefs, trufflehog, dex, cert-manager-csi-driver, rancher, cert-manager, minio, external-secrets-operator, kyverno-notation-aws, bento, openbao, flux, rancher-webhook, flux-source-controller,...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1

cert-manager Operator for Red Hat OpenShift 1.19.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

CVE-2026-72880

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the apiCreateCertificate schema in packages/server/src/db/schema/certificate.ts accepts a client-supplied certificatePath, and packages/server/src/services/certificate.ts joins that value to the certificate root withou...

JLSEC-2026-1139 Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger...

Issue summary: An attacker-controlled CMP Certificate Management Protocol server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference causes a crash of the application and a Denial of Service. An attacker controlling a CMP server or acti...